CVE-2007-6563 Heap-based buffer overflow in WinAce 2.65 and earlier, and possibly other versions before 2.69, allows user-assisted remote attackers to execute arbitrary code via a long filename in a compressed UUE....
HighCVSS 10.0
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in WinAce 2.65 and earlier, and possibly other versions before 2.69, allows user-assisted remote attackers to execute arbitrary code via a long filename in a compressed UUE archive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| winace | <= 2.65 | No fix listed |
References
- JVN#44736880 third-party-advisory
- JVNDB-2007-000822 third-party-advisory
- 40267 vdb-entry
- 28215 patch third-party-advisory vendor-advisory
- www.fourteenforty.jp
- 27017 patch vdb-entry
- ADV-2007-4312 vdb-entry
- winace-uue-bo(39268) vdb-entry